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(57) Abstract: An apparatus for securing the user's se- 
cret information transmitted from a mobile station is pro- 
vided in a mobile communications system in communica- 
tion with a web server through an Internet service server, 
wherein the data relating to the user's secret information 
is selected in response to the data request from the mobile 
station and/or web server, the selected data is enciphered 
in a given format, and the enciphered data is directly trans- 
^mittecfto" uTe^web'server'ano/or the mobileslalionwiihoui 
any additional processing operation by the service server. 
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APPARATUS FOR SECURING USER'S INFORMATION IN A MOBILE 
COMMUNICATION SYSTEM CONNECTED TO THE INTERNET AND 

METHOD THEREOF 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

The present invention relates to an apparatus and method for securing the 
information of a subscriber in a mobile communication system in communication with 
the Internet. 

2. Description of the related art 

A recent development in the mobile communication has enabled users to 
execute the so-called electronic trade through the Internet using wireless communication 
technology. In order to foster the electronic trade on the Internet, the most important 
thing is to prevent the leakage of the personal information of a client while he or she is 
making a connection to the Internet web server, which provides electronic trade contents. 
Accordingly, the goal of the security system is to secure the personal information of the 
user while using the Internet so that an unwanted user can not tap into the personal 
information of the user, such as a password to access the web server, credit card number 
with its related password to make transaction, etc. 

The conventional security system for securing confidential information used in 
the wired Internet communication typically employs a Secure Socket Layer (SSL), 
which is proposed by the Netscape Company in the United States. The SSL system 
— en^^tK^infom^ 

server. However, the SSL system may not be properly employed for the wireless or the 
mobile Internet communication system due to the reasons discussed below. 

Firstly, the mobile station has a limited memory capacity that is inadequate to 
execute the web applications as in the SSL system. Thus, the conventional mobile 
station is not designed to execute such web applications. Secondly, in order to make a 
wireless connection to the Internet web server, the mobile station first has to be 
connected with the pertinent Internet service server to request the web content services. 
In this case, the security system between the web server and the service server should 
have the same standard as that of between the service server and the mobile station, in 
order to properly perform and protect personal information in the whole network. 
However, the conventional security system does not provide a uniform standard between 
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them. As an illustrative example, FIG. 1 depicts a conventional mobile communication 
network system provided in the conventional security system. As shown, the SSL system 
is employed between the service server and the web server, but a wireless security 
system with a different system is employed between the mobile station and the service 
server. Thus, the whole network does not have the same standard between them. 
Accordingly, the prior art security systems having different systems and standards can 
not properly provide the means for securing the personal information of the user. 

As aforementioned, the conventional security system designed for the wired 
Internet communication system can not be properly applied to the wireless Internet 
communication system, thus impeding the booming market of the electronic trade 
through the Internet using mobile communication technology. 

SUMMARY OF THE INVENTION 

It is an object of the present invention to provide an apparatus and method for 
securing confidential user information when executing electronic trade using the mobile 
Internet communication system, wherein the prior art system uses the SSL system 
employed in the wired Internet communications. 

It is another object of the present invention to provide an apparatus and method 
for securing confidential information by achieving end-to-end security from a mobile 
station to a web server using the same standard to conduct the data flow between the 
mobile station, the service server, and the web server. 

According to one aspect of the present invention, an apparatus for securing the 
user's secret infonn jrtionjra^ a welTserver through an 

Internet service server is provided, wherein the data relating to the user's secret 
information is selected in response to the data request from the mobile station and/or 
web server, the selected data is enciphered in a given format, and the enciphered data is 
directly transmitted to the web server and/or the mobile station without further 
intervention by the service server. 

The present invention will now be described more specifically with reference to 
the drawings attached only by way of example. 

BRIEF DESCRIPTION OF THE ATTACHED DRAWINGS 
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FIG. 1 is a schematic diagram for illustrating the conventional mobile Internet 
communication system with the conventional mobile security system; 

FIG. 2 is a schematic diagram similar to FIG. 1 and illustrates a mobile security 
system according to the present invention; 

FIG. 3 is a schematic diagram for illustrating the procedure of transmitting an 
ordinary web document and the secret data according to the inventive security system in 
the mobile Internet communication; and, 

FIG. 4 is a flow diagram for illustrating the process of securing the user's 
information according to the inventive mobile Internet communication. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

In the following description, for purposes of explanation rather than limitation, 
specific details are set forth such as the particular architecture, interfaces, techniques, etc., 
in order to provide a thorough understanding of the present invention. However, it will 
be apparent to those skilled in the art that the present invention may be practiced in other 
embodiments that depart from these specific details. For the purpose of clarity, detailed 
descriptions of well-known devices, circuits, and methods are omitted so as not to 
obscure the description of the present invention with unnecessary detail. 

In order to provide a level of assurance that the purported sender of the message 
^i^i~n~fact~ihe-truc-sen signature can be encrypted 

using various known methods. The enciphering algorithm suitably appli^*^cbrding-to~ 
the present invention is a Riverst-Shamier-Adleman (RSA) public key algorithm, which 
is the most widely used algorithm in the current electronic trade security system. The 
RSA algorithm provides both enciphering and electronic signatures (or encryption keys) 
based on prime factorization. That is, the principle of the RSA algorithm is based on the 
fact that it is easier to calculate the product of two prime numbers "p" and "q" but it is 
difficult to extract the "p" and "q" from the product "n", which is obtained by 
multiplying <4 p" and "q" That is, two keys, one being the public key and the second the 
secret key, are used so that whenever one encrypt something with the secret key, it can 
be decrypted only with the public key, and vice versa. In the embodiment of the present 
invention, the RSA algorithm generates the public key and secret key used for 
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enciphering/deciphering a session key. The public key is used by the client to encrypt 
the session key, which then sends the encrypted session key back to the server. The 
server decrypts the session key with its secret key and establishes the secured connection 
with the client. 

5 

Moreover, in the embodiment of the present invention, the algorithm for 
generating the session key uses a SEED symmetric key algorithm, which is based on the 
Korean Data Encryption Standard and uses the 128-bit block enciphering algorithm 
developed by the Korea Information Security Agency (KISA) for public electronic trade. 

10 The SEED symmetric algorithm features 8-, 16-, and 32-bit data processing, deciphering 

in the way of block enciphering, and the input/output phrase and input key is 128bits. It 
is also designed to safeguard against the Differential Cryptanalysis (DC)/ Linear 
Cryptanalysis (LC) and includes the enciphering/deciphering speed faster than three 
times that of the Data Encryption Standard (DES). Its structure is based on Feistel and 

15 the internal function is designed to use a look-up table obtained by converting a non- 

linear function. In the present invention, the SEED symmetric key algorithm is applied 
with 12 rounds to generate the session key by which the data of the user's information is 
enciphered. 

20 The mobile station, the Internet service server, and the web server are operated 

according to the present invention in the mobile Internet communication as described 
below. 

First, the mobile phone is provided with an inventive security program required 
25 for connecting with the web server to receive the public key and to internally generate 

the session key used during a security transaction. The session key is used to encipher 

and decipher the data. The enciphering is performed according~t^tK^RSA"aigorithm- 
and the 128bits SEED algorithm. The web server, using the RSA algorithm, generates 
the public key and the secret key to enable the mobile station to perform the security 
30 transaction by sending the public key to the mobile station. The received public key is 

used to generate the session key to encipher the data transmitted by the mobile station, 
and the mobile station generates the session key using the SEED algorithm. Then, the 
web server uses the secret key to decipher the session key used to encipher the data 
transmitted by the mobile station. That is, the data encrypted using the public key can be 
35 decrypted only by using the secret key, and vice versa. Thus, the web server deciphers 

the session key, which is generated using the SEED algorithm, using the RSA secret key 
and the deciphered session key is used to decipher the enciphered data according to the 
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enciphering and deciphering of the 128bits symmetric key SEED. 

According to the embodiment of the present invention, the data processing 
between the mobile station and the web server is initiated when the web server generates 
a pair of its own public key and secret key. The public key is sent to the service server, 
then revised and sent as a certificate to the mobile station upon a request. At this point, 
the mobile station has been authorized for use and the service sever acts as an 
intermediary between the mobile station and the web server by forwarding data as 
needed. Then, the mobile station stores the public key to internally generate a session 
key to encipher the confidential data to be sent to the web server. To generate the 
session key, the mobile station enciphers the received public key to generate the 
symmetric key to be sent to the web server. Thereafter, the web server deciphers the 
symmetric key with its own secret key. With the deciphered symmetric key, the web 
server deciphers the enciphered data received from the mobile station. In a reverse 
transmission, the web server enciphers data to be sent to the mobile station using the 
symmetric key received from the mobile station. The mobile station in return deciphers 
the enciphered data received from the web server using the symmetric key that is 
previously sent to the web server. In the embodiment of the invention, the service server 
is provided as a proxy server. 

The data format on each path of the mobile Internet communication is described 
in connection with FIG. 2, wherein the security system among the mobile station, the 
service server, and the web server uses the inventive mobile micro security system 
(MMS). Namely, the same standard, MMS, is employed between the mobile station and 
the web server. As the public key of the web server is electronically signed with the 
secret key of the web server at the moment when the public key is first sent to the mobile 
station, the path between the mobilFstation and~the mobiieTommlmi^ 
not be tampered by a hacker using the false public key. Moreover, the data packet 
enciphered by the mobile station is in the form of 128bits code so that the hacker can not 
comprehend the content of the original document. Furthermore, the hacker can not tap 
into the data packet as it travels from the mobile network to the service server via the 
Internet. This is achieved as the path between the mobile communication network and 
the service server makes the data packet, enciphered by the mobile station, in form of 
128bits to the service server via the Internet, thus preventing a hacker from hacking its 
content. 

In addition, the internal network of the service server is protected by a firewall 
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with a separate hacking-detective system according to the present invention. The service 
server simply transfers the enciphered data from the mobile station to the web server 
without any processing operation therein. Also, the service server and the web server are 
usually connected through an exclusive line through which the 128bits-enciphered data 
is transmitted, thus making it difficult for the hacker to access. 

Furthermore, the hacking-detective system according to the present invention is 
realized because the web server receives the symmetric key randomized by the mobile 
station according to 128bits SEED algorithm. Then, the web server securely deciphers 
the 128bits-enciphered data received from the mobile station using the RSA secret key. 
In this way, the enciphered data of the mobile station may be deciphered only by the web 
server, and the enciphered data from the web server may be deciphered only by the 
mobile station. The latter is possible because the SEED symmetric key of the web server 
can also be transferred to the mobile station in a reverse operation. 

Communication between the mobile station and the web server proceeds with 
each message enciphered by the session key before being sent and deciphered by the 
session key at the receiving end, wherein session key generated from the mobile station 
is enciphered using the public key and generated as symmetric key. To this end, the 
mobile station is installed with the security program for connecting with the security 
service server. The security program features a function to receive the public key from 
the web server and in return internally generates a session key to encipher personal 
information and is sent from the mobile station to the web server. That is, the session 
key is used to encipher and decipher the secret data according to the RSA enciphering 
and the 128bits SEED symmetric key. 



FIG. 3 schematically shows~the transmi^io^of~an^^ 
without any enciphering and the transmission of secret data that is enciphered according 
to the present invention. Namely, the service server transmits an ordinary web document 
between the mobile station and the web server through a proxy server and transmits the 
personal data between them without any additional processing operation. As shown in 
FIG. 3, two different data transmission are operated according to the present invention 
due to the limited data amount that can be transmitted and processed in the wireless 
Internet communication. Thus, only the personal/secret data, which needs to be 
protected from an unwanted third party, is directly transmitted between the mobile 
station and the web server. 



3/17/05, EAST version: 2.0.1.4 



WO 01/01644 



PCT/KR00/00689 



-7- 

According to the embodiment of the present invention, the process of securing 
the user's information when the mobile station attempts to connect with the web server is 
described in connection with FIG. 4, wherein the mobile station registers the public key 
received of the service server, in step 310, which is hard-coated on the web browser of 
the mobile station. The service server registers the public key, certificate, and address of 
the web server along with its certificate version information, which are periodically 
revised according to the corresponding data delivered by the web server. In step 312, the 
mobile station requests a connection with the web page to receive electronic files in 
response to the user's request. This request is directly transmitted to the web server 
through the "GET" command for requesting the electronic document that can be 
accessed with the personal/secret information. At this time, the service server does not 
perform any additional processing operation to the GET command being transferred to 
the web server. Here, the web server may be a banking server, a stock dealing server, etc. 

In step 314, the web server being requested with the connection determines the 
data to be enciphered upon receiving the request from the mobile phone, then informs 
the result to the mobile phone through the service server. The data to be enciphered 
includes personal/secret information, such as a password and a credit card number. 
Other data such as the user's login ID, ordinary character information, etc., does not 
require enciphering so that the amount of the data enciphered can be reduced. This is 
helpful because the mobile Internet communication is very limited in the amount of data 
that can be processed compared to the wired Internet communication. In step 316, the 
service server sends the presently registered certificate version, which periodically 
revised by the web server, to the mobile station. The certificate version provides 
updated information about the host name, the IP address, and the public key of the web 
server that can be used to authenticate message source. Then, the mobile station 
deteimines^hether-the^ 

registered version. The previously registered version is downloaded from the previous 
access to the same web server by the mobile station. If they are the same, the 
enciphering is performed with its previously registered version. 

Alternatively, if not the same, the mobile station requests the service server to 
send a new version of certificate. The request is made by a "CERT" command, which is 
prearranged protocol between the mobile station and the service server for sending the 
certificate. In response to the command "CERT," the service server sends the presently 
registered certificate of the web server in step 320. That is, if there were a request for a 
new certificate version by the mobile station, the service server (or proxy server) having 
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the updated information that is periodically downloaded from the web server (content 
server), sends a response message, which is comprised of a header and a text. In the 
header, the digital SIGN (signature for the public key of the web server requested by the 
mobile station) is attached thereto, and the certificate (host name, IP address, and public 
key) is attached to the text portion. 

In step 322, the mobile station receives the response message from the service 
server and authenticates the text of the certificate by validating the digital SIGN in the 
header. Namely, the mobile station checks whether the digital SIGN corresponds to that 
of the pubic key of the web server, and also checks for whether the text is damaged. If 
the digital SIGN is confirmed, the mobile station retrieves the public key included in the 
certificate and revises its certificate table therein. In step 324, the session key is 
generated using the public key contained in the certificate for the transmission of the 
user's information under security. As described above, the session key is generated 
according to the 128bits SEED algorithm, which is used to encipher the personal data to 
be transmitted by the mobile station user. In step 326, the user's information is 
enciphered by the session key to achieve the security data. In step 328, the session is 
enciphered by the public key to generate the symmetric key. 

In step 330, the symmetric key obtained by enciphering the session key using 
the public key and the data enciphered by the session key are transmitted to the web 
server via the service server. Of course, the service server does not perform any further 
operation to the data being transmitted to the web server. Then, in step 322, the web 
server deciphers, using the secret key, the symmetric key included in the user's 
information received from the mobile station to generate a session key. In step 334, the 
web server deciphers, using the generated session key, the user's information, i.e., the 
security data encipfrered-by-the-mobite^ data can be re trieved 

and the original data can be processed by the web server accordingly. 

Meanwhile, in step 320, a hash is generated using a hash function (i.e., 
Message-Digest 5 (MD5). The MD5 is the functional protocol used for enciphering, of 
which, if the result agrees with the certificate, it is considered that the data transmission 
has been normally achieved without any external hacker. The 128bits hashing value (i.e., 
a character series of 128bits) is generated for the content of the certificate, encrypted 
with the service server's secret key, and then appended to the certificate. When the 
mobile station receives the certificate, the mobile station takes the encrypted hash value 
and decrypts it with the public key of the service server. Then, to verify that the 
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certificate has not been tampered with, the mobile station generates the certificate hash 
value again and compares it with the decrypted hash value - if both match, the certificate 
is valid. Accordingly, a secure hash value is used to authenticate messages, and to 
ensure that the data sent from the service server is not tampered en-route. Then, it is 
5 verified that the public key of the web server is valid to perform the step 324. 

Although the previous description concerns the user's information transmitted 
from the mobile station to the web server, it also applies to the opposite transmission of 
the user's information requiring security. In this case, the mobile station may likewise 
10 decipher the enciphered information from the web server using the public key and the 

secret key. 

In addition, the security transaction application program for the mobile station 
and web server is prepared as described below. 

15 

Firstly, the HTML document for securing the user's information by 
enciphering/deciphering is prepared and uploaded to the web server. The distinction by 
the Internet search engine between the HTML documents requiring 
enciphering/deciphering from the ordinary HTML document is made by using the class 
20 attribution defined in the Internet web protocol. This may be achieved by designating 

the class as the security indicator "SCURE," which represents the corresponding field to 
be enciphered. 

Thus, this invention provides an apparatus for securing the user's information 
25 for electronic trade in the mobile Internet communications. 

~~ " — WMie"the^resent-i^ in connection with specifi c 

embodiments accompanied by the attached drawings, it will be readily apparent to those 
skilled in the art that various changes and modifications may be made thereto without 
30 departing from the gist of the present invention. 
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WHAT IS CLAIMED IS: 

1. A security system comprising at least one mobile station, an Internet 
service server, and a web server, said mobile station being operative to transmit/receive 
data to/from said web server via said Internet service sever; characterized in that, upon 
request for transmission of said data by said mobile station or said web server, said data 
is enciphered in a predetermined format to be transferred to one of said mobile station or 
said web server, said enciphered data is deciphered by one of said mobile station or said 
web server, without further intervention by said Internet service server. 

2. The system as defined in Claim 1, wherein said service server registers 
in advance the certificate of said web server to be sent to said mobile station so that a 
previously registered certificate stored in said mobile station is updated when said 
mobile station requests a connection to said web server. 

3. The system as defined in Claim 1, wherein said data is selectively 
enciphered/deciphered according to a class attribution of said request for the 
transmission of said data made by said mobile station or said web server. 

4. The system as defined in Claim 4, wherein said 
enciphering/deciphering of said data is performed according to a Riverst-Shamier- 
Adleman (RSA) public key algorithm RSA algorithm and a SEED symmetric key 
algorithm, said SEED symmetric key algorithm is based on a Korean Data Encryption 
Standard developed by a Korea Information Security Agency (KISA). 

5. A system for securing personal information exchanged during a 
~see\mty-uan5action4n-a-mob 

a web server for providing electronic data in response to a request by a user and 
for generating a public key and a secret key to secure said personal information; 

a mobile station for generating a session key used in said security transaction 
using said public key received from said web server and for enciphering/deciphering said 
personal information using said session key; and, 

wherein said web server deciphers said session key received from said mobile 
station using said secret key; and, 

wherein said personal information enciphered by said mobile station is 
deciphered using said deciphered session key. 
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6. The system as defined in Claim 5, further comprising a service server 
for directly transmitting said personal information enciphered between said mobile 
station and said web server without further intervention by said service server. 

7. The system as defined in Claim 5, wherein said 
enciphering/deciphering of said personal information by said session key is performed 
according to a Riverst-Shamier-Adleman (RSA) public key algorithm RSA algorithm 
and a SEED symmetric key algorithm, said SEED symmetric key algorithm is based on 
a Korean Data Encryption Standard developed by a Korea Information Security Agency 
(KISA). 

8. A method for securing personal information transmitted from a mobile 
station of a mobile communications system in communication with a web server via a 
service server, comprising the steps of: 

receiving a request for the transmission of said personal information from said 
mobile station or said web server; 

selectively enciphering said personal information in a predetermined format to 
be transferred to one of said mobile station or said web server; and, 

deciphering said enciphered personal information by one of said mobile station 
or said web server without having any intervention by said service server. 

9. The method as defined in Claim 8, further comprising the step of 
transmitting a certificate from said Internet service server to said mobile station after 
receiving said request for the transmission of said personal information. 

10. The method as defined in Claim 9, wherein said service server registers 
- in^advance-said-certificate-oLsai d web server to be sent to said m obile station so that a 

previously registered certificate stored in said mobile station is updated when saicf 
mobile station requests a connection to said web server. 

11. The method as defined in Claim 8, wherein said data is selectively 
enciphered/deciphered according to a class attribution of said request for the 
transmission of said personal information made by said mobile station or said web server. 

12. The method as defined in Claim 8, wherein said 
enciphering/deciphering of said personal information by said mobile station or said web 
server is performed according to a Riverst-Shamier-Adleman (RSA) public key 
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algorithm RSA algorithm and a SEED symmetric key algorithm, said SEED symmetric 
key algorithm is based on a Korean Data Encryption Standard developed by a Korea 
Information Security Agency (KISA). 

5 13. A method for securing personal information transmitted from a mobile 

station of a mobile communications system in communication with a web server via a 
service server, comprising the steps of: 

generating, by said web server, a public key and a secret key in response to a 
request made by a user to transmit electronic data, said public key and said secret key is 
10 used to secure said electronic data traveling to and from said mobile station; 

transmitting said public key to said mobile station; 

generating, by said mobile station, a session key responsive to said public key 
received from said web server, said session key is used for enciphering/deciphering said 
personal information transmitted between said mobile station and said web server; and, 
15 wherein said web server deciphers said session key received from said mobile 

station using said secret key; and, 

wherein said personal information enciphered by said mobile station is 
deciphered using said deciphered session key. 

20 14. The method as defined in Claim 13, further comprising the step of 

transmitting, by said service server, said personal information enciphered between said 
mobile station and said web server without further intervention by said service server. 

15. The method as defined in Claim 13, wherein said 
25 enciphering/deciphering of said personal information by said session key is performed 

according to a Riverst-Shamier-Adleman (RSA) public key algorithm RSA algorithm 
~ ~anti-a-SEBD-svnmsetri^ key algorithm is based on 

a Korean Data Encryption Standard developed by a Korea Information Security Agency 
(KISA). 

30 

16. A method for securing data transmitted in a mobile Internet 
communications system of the type having a web server, a mobile station for exchanging 
data with said web server, and a proxy service server in communication with said mobile 
station and said web server, comprising the steps of: 

35 requesting, by said mobile station, a connection to receive an electronic data 

from said web server via said service server; 

generating, by said web server, a public key and a secret key in response to said 
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request by said mobile station; 

transmitting, by said web server, said public key to said mobile station to be 
registered in said mobile station; 

transmitting, by said service server, a new certificate to said mobile station; 
5 determining, by said mobile station, whether a previously registered certificate 

in said mobile station is same as said new certificate received from said service server; 

if said new certificate is same as said previously registered certificate, 
enciphering, by said mobile station, personal information using a session key generated 
by said public key received from said web server, and enciphering said public key to 
10 generate a symmetric key, and transmitting said enciphered personal information and 

said generated symmetric key to said web server via said service server; and, 

deciphering, by said web server, said symmetric key received from said mobile 
station to covert back to said session key, and deciphering said enciphered personal 
information using said converted session key and said secret key. 

15 

17. The method as defined in Claim 16, further comprising the step of 
requesting, by said mobile station, said new certificate from said service server if said 
new certificate is not same as said previously registered certificate 

20 18. The method as defined in Claim 16, further comprising the steps of 

enciphering, by said web server, the data transmitted to said mobile station using said 
symmetric key received from said mobile station; transmitting said enciphered data to 
said mobile station; and, deciphering, by said mobile station, said enciphered data 
received from said web server using said symmetric key transmitted previously to said 

25 web server. 

-___J.9. The method as defined i n Claim 16, wherein said 

enciphering/deciphering of said personal information by said session key is performed 
according to a Riverst-Shamier-Adleman (RSA) public key algorithm RSA algorithm 
30 and a SEED symmetric key algorithm, said SEED symmetric key algorithm is based on 

a Korean Data Encryption Standard developed by a Korea Information Security Agency 
(KISA). 

35 
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